davidianbonner/cli-phone-number-validator

Release historydanger

The package has had four releases, all concentrated in November 2017, with no releases in the last nine years. That long release gap is strong evidence of abandonment risk for a dependency.

Lifecycle scriptscaution

The post-create-project-cmd script runs during Composer project creation. This is plausible for a CLI application scaffold, but it adds install-time behavior that consumers should account for.

Maintainerscaution

Only one registry publishing account is listed. That is not inherently unhealthy for a user-owned project, but combined with the long release gap it indicates limited maintenance capacity.

Project backingcaution

The repository is owned by the same individual namespace as the package, with user ownership rather than organizational backing. This is consistent ownership but provides no broader maintenance capacity.

Repo popularitycaution

The repository has one star and no forks, providing little evidence of community adoption or backup maintenance. Popularity is supporting evidence rather than a verdict by itself.